$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json) Hash identifier: dQ+FwRKXnEx9LDSBBhZtVObDYsP6vrCZ6kZgNiI0sOE= Subject key identifier: A8:7A:0D:BF:20:2D:F1:09:30:F8:85:91:18:93:C8:88:1F:4C:5C:6B Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft Manifest number: 19 Signing time: Fri 17 May 2024 08:53:23 +0000 Manifest this update: Fri 17 May 2024 08:53:23 +0000 Manifest next update: Fri 24 May 2024 08:53:22 +0000 Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: iw9GE3Bj8VL13qPB3v9S9CLQh54v/Yxt6xT4iesNEBU=) 2: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: 4QxfcSzL20wlHccDIuyJTCp3h7Gtt89PLx10tCKRmWQ=) 3: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: eM4tB5nnuyZAw+yzoibZmMU7jl9fV5PFjIZQp8eY2Fc=) 4: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: Iu3dQo3UxQ27f0LG5TZGsWFPYKiAJAsXE8htjtPCT1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Validity Not Before: May 17 08:53:23 2024 GMT Not After : May 24 08:53:22 2024 GMT Subject: CN=66471b03-32c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:70:1d:a9:fe:33:2a:78:e0:47:5f:f8:89: 45:df:6c:75:90:aa:60:7e:81:bc:dd:3a:6c:06:82: 0e:b5:9d:de:04:ee:2b:f5:20:0d:1c:07:86:20:2c: b5:eb:fe:15:64:64:8f:35:c4:ec:cf:ae:8d:25:f6: 3d:d2:76:61:0a:60:2f:1e:88:60:3b:15:a6:3d:52: 42:96:67:97:56:0f:ee:c6:54:b4:f3:6f:dc:a5:48: 80:7b:e0:c4:a7:67:65:d5:ba:ba:9a:6c:3b:7c:6d: 5b:48:f8:c2:95:87:73:63:27:e9:db:81:c5:e6:61: c9:4a:e4:2f:25:9e:a2:0c:28:50:c9:71:8e:51:b0: 38:8c:d1:2e:04:2a:cc:7f:fb:e6:21:c3:b6:aa:f9: 3c:2f:05:d9:c2:91:98:12:77:23:91:80:ed:61:9c: 34:8e:71:d6:9a:29:4c:03:71:64:f2:f8:ae:01:b8: 42:5a:7c:19:5b:b7:0e:f4:6b:b6:43:0f:e6:b4:1c: b6:14:d8:23:e1:83:0e:9a:ec:6c:2e:63:4f:83:3f: e1:a4:47:df:7c:71:6c:46:d0:9a:16:c8:28:0f:6e: e1:57:37:d0:04:36:7b:f2:2d:b0:ae:bb:da:77:c6: bd:9e:ee:24:03:a7:cf:11:96:6b:0d:cd:5c:25:d3: 51:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7A:0D:BF:20:2D:F1:09:30:F8:85:91:18:93:C8:88:1F:4C:5C:6B X509v3 Authority Key Identifier: keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:48:78:f6:e5:bd:4a:9a:06:4f:45:0f:85:e5:45:61:bb:e9: 85:f9:ce:f2:7f:73:0f:c5:5b:30:ca:ba:1e:03:00:1f:a9:a6: b4:74:49:68:06:29:cc:0c:9b:37:1c:5f:e3:96:31:3a:df:8f: 4d:4c:c5:1a:6e:84:63:5d:91:ea:98:fa:d8:90:ae:72:16:d0: 24:ae:a0:66:1c:3c:53:d0:58:c8:d5:e2:0c:ce:0d:3a:7e:90: 96:9a:48:bb:90:09:9b:8f:2e:c8:b4:93:d7:42:15:bd:54:91: 82:d3:49:45:2d:e7:4c:ba:8e:dc:c0:77:c1:3e:06:1e:0e:11: 10:0d:06:b9:d3:2a:c1:e7:9a:86:c4:53:16:db:2e:43:88:69: 7e:4c:81:01:21:a3:f4:75:97:65:f6:f3:80:d2:af:5b:5a:23: 47:2d:91:8d:88:36:52:e4:c3:9d:59:3e:05:dc:06:65:e9:47: 76:76:59:b0:18:52:2f:69:54:66:2e:9d:95:94:2f:7d:8d:54: fa:7b:1e:6c:d7:7d:fc:49:83:f9:10:0f:17:94:8e:3b:af:80: 1a:55:c6:e5:dd:6a:12:fa:cf:66:5a:ac:c1:16:54:24:a5:a6: be:1a:37:a5:49:59:a4:39:06:26:30:e6:3a:8f:68:a8:cf:5d: 73:7f:49:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RUY0MTExMC8GA1UEBRMoMzM2RERFN0VDMzI4MDQ5OTk2NDM3MUNBRUUyNjIwRkJG Q0FDREM5ODAeFw0yNDA1MTcwODUzMjNaFw0yNDA1MjQwODUzMjJaMBgxFjAUBgNV BAMTDTY2NDcxYjAzLTMyYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7m3Adqf4zKnjgR1/4iUXfbHWQqmB+gbzdOmwGgg61nd4E7iv1IA0cB4YgLLXr /hVkZI81xOzPro0l9j3SdmEKYC8eiGA7FaY9UkKWZ5dWD+7GVLTzb9ylSIB74MSn Z2XVurqabDt8bVtI+MKVh3NjJ+nbgcXmYclK5C8lnqIMKFDJcY5RsDiM0S4EKsx/ ++Yhw7aq+TwvBdnCkZgSdyORgO1hnDSOcdaaKUwDcWTy+K4BuEJafBlbtw70a7ZD D+a0HLYU2CPhgw6a7GwuY0+DP+GkR998cWxG0JoWyCgPbuFXN9AENnvyLbCuu9p3 xr2e7iQDp88RlmsNzVwl01E5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqHoNvyAt 8Qkw+IWRGJPIiB9MXGswHwYDVR0jBBgwFoAUM23efsMoBJmWQ3HK7iYg+/ys3Jgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFRjQxL0M3NURBMTMyRjJG QjExRUU5RkNGNzY0Q0M0RjlBRTAyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTIzZWZzTW9CSm1XUTNISzdpWWctX3lzM0pnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF RjQxL0M3NURBMTMyRjJGQjExRUU5RkNGNzY0Q0M0RjlBRTAyL00yM2Vmc01vQkpt V1EzSEs3aVlnLV95czNKZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAClIePblvUqaBk9FD4XlRWG76YX5zvJ/cw/FWzDKuh4DAB+pprR0SWgG KcwMmzccX+OWMTrfj01MxRpuhGNdkeqY+tiQrnIW0CSuoGYcPFPQWMjV4gzODTp+ kJaaSLuQCZuPLsi0k9dCFb1UkYLTSUUt50y6jtzAd8E+Bh4OERANBrnTKsHnmobE UxbbLkOIaX5MgQEho/R1l2X284DSr1taI0ctkY2INlLkw51ZPgXcBmXpR3Z2WbAY Ui9pVGYunZWUL32NVPp7HmzXffxJg/kQDxeUjjuvgBpVxuXdahL6z2ZarMEWVCSl pr4aN6VJWaQ5BiYw5jqPaKjPXXN/SS8= -----END CERTIFICATE-----Generated at Fri May 17 10:10:53 2024 by rpki-client on console-fra.rpki-client.org